8.3.0-alpha6

Zeebe

release/8.3.0-alpha6

Enhancements

Broker

• Create DbTenantAwareKey (#14019)
• Provide an API for data interchange of Zeebe auth data (#13988)
• Provide a TenantAccessChecker API for multi-tenancy (#13987)
• Add auth data to Zeebe records (#13989)

Gateway

• Provide an API for data interchange of Zeebe auth data (#13988)
• Provide a TenantAccessChecker API for multi-tenancy (#13987)
• Add auth data to Zeebe records (#13989)

Java Client

• job.getVariable ergonomic method in Java client (#13752)
• Introduce JobWorker metrics for the Java client (#4700)
• Java client supports multi-tenancy for DeployResource RPC (#13321)

Bug Fixes

Broker

• Backpressure queue is not reset when back-to-back role transitions (#14044)
• Condition ignored on Inclusive Gateway with singular outgoing Sequence Flow (#13936)
• RandomizedRaftTest.consistencyTestWithSnapshot fails with unexpected exception (#13093)
• Messaging service is not running (#7855)
• Startup failure of one raft partition server affects the availability of other healthy partition (#5209)

Misc

• Remove DRG from cache upon deletion (#14146)
• Should not activate link catch event in subprocess (#14028)
• Upgrading leaves deadline entries without jobs (#13881)
• ConcurrentModificationException when clearing obsolete job activation requests (#13867)
• Job streaming may trigger unnecessary polling (#13814)
• IllegalStateArgument when removing job stream (#13796)
• Release: Repo dispatch Benchmark fails on 8.0/8.1 (#13787)
• Process instances are banned when trying to activate a call activity with large variables (#13521)
• Do not write the entire command for rejection (#12699)

Misc

• Add integration tests for Job Push (#13516)
• Delete and recreate signal subscription of previous version (#13354)
• Migrate running process instance into PROCESS_INSTANCE_KEYS_BY_DEFINITION_KEY ColumnFamily (#13343)
• Notify Zeebe Team in Slack when an issue is labelled as critical (#13253)
• Support S3 backup httpclient custom configuration. (#12942)
• Zeebe BPMN Model should provide reasonable defaults for definition attributes (#12283)
• Implement query to retrieve the latest form by formId from the state (#14137)
• Allow binding forms to start events by formId (#14135)
• Allow binding forms to user tasks by formId (#14134)
• Save Form to the state (#14133)
• Gateway supports multi-tenancy in deployment RPCs (#13319)

Maintenance

• No longer move/copy snapshots (#14045)
• Enable yielding on due date checker by default (#14032)
• When using a call activity, only the variables defined via input mappings are propagated (#13959)
• Broker uses configuration from ClusterTopologyManager (#13958)
• Config manager in coordinator queries known members before initializing configuration (#13956)
• Align component versions in our e2e tests (#13923)
• Integrate job worker streaming and metrics into benchmarks (#13914)
• Create incident when timer duration is too large (#13880)
• Reject static duration which is too large (#13879)
• Automerge green renovate PRs (#13791)
• Release: Repo dispatch Benchmark fails on 8.0/8.1 (#13787)
• Improve ZeebePartition recovery time with large state (#13775)
• Add ColumnFamily to keep track of executed migrations (#13763)
• Configure Renovate to work with ubuntu tag versioning (#13736)
• Add experimental multi-tenancy record schema to protocol (#13520)
• Provide access to an executor in the endpoint manager (#13048)
• Integrate end-to-end job stream lifecycle management (#11710)
• Avoid parsing DMN decisions for every evaluation (#8571)
• Reevaluate Banning concept (#5121)
• No longer move/copy snapshots (#14045)
• Change protocol ID of the stream transport protocol (#14033)
• Configure Renovate to work with ubuntu tag versioning (#13736)

Merged Pull Requests

• chore(monitor): Operate datasource variable reference (#13816)
• Reuse already created checksum collections on persist (#14184)
• deps(ubuntu): use release tag without date (#14074)
• deps(deps): update ubuntu docker tag to jammy-20230804 (main) (#14071)

Operate

🧹 Chore

• update Zeebe and Identity to 8.3.0-alpha6 (#5312)
• update CHANGELOG.md

Tasklist

💊 Bugfixes

• Update IdentityAuthorizationService.java (#3438)

Identity

🚀 New Features

• add support for the default tenant (#2078)
• manage tenants UI (#2091)
• support removing members from tenants (#2089)
• get applications assigned to a tenant (#2072)
• support application assign to tenants (#2062)
• add keycloak 22 support (#2044)
• get users assigned to tenant (#2050)
• implement get groups assigned to tenant api endpoint (#2028)
• support updating tenants (#2047)
• implement delete tenant endpoint (#2036)
• implement get all tenants api endpoint (#2026)
• implement get tenant by id api request (#2025)
• assign groups to tenant (#2024)
• implement assigning users to a tenant (#2023)
• tenant database relations (#2033)
• support global access members to tenants (#1980)
• expose SDK method to retrieve tenants assigned to a token (#1962)
• retrieve tenants assigned to a token (#1961)
• expose batch authorization update method in SDK (#1963)
• implement tenant post endpoint (#1878)
• retrieve resources for given organization ID (#1837)
• add support for connecting to Keycloak v21 (#1830)
• add sdk support for resource authorization creation (#1823)
• support retrieving resource authorizations for token + orgId in the SDK ([#1827](https://github.com/camunda-cloud/identit...

8.0.21

Zeebe

release/8.0.21

Bug Fixes

Broker

• Backpressure queue is not reset when back-to-back role transitions (#14044)
• Brokers on release benchmarks are failing due to OOM (#13948)
• Messaging service is not running (#7855)

Misc

• Release: Repo dispatch Benchmark fails on 8.0/8.1 (#13787)

Maintenance

• Release: Repo dispatch Benchmark fails on 8.0/8.1 (#13787)
• Add ColumnFamily to keep track of executed migrations (#13763)

Merged Pull Requests

• fix(gateway): close transport client and request manager with the BrokerClient (#14100)
• fix(broker): remove existing limiter before adding a new one (#14062)
• fix: don't retain requests until response is sent (#14012)
• Track executed migrations in a ColumnFamily (#13780)
• fix(stream-platform): register record listener before start reading (#13778)

Operate

💊 Bugfixes

• remove specific thymeleaf dependency (#5309)

🧹 Chore

• update Zeebe and Identity to 8.0.21 (#5313)
• update CHANGELOG.md

Tasklist

💊 Bugfixes

• billing tab for 8.0 version

🧹 Chore

• Bump Identity and Zeebe to 8.0.21 (#3435)
• Bump Identity and Zeebe to 8.0.20 (#3423)
• preview-environment: move to cheaper preemptible nodepool (#1957) (#3370)
• use GHA runner [8.0] (#3338)
• update GHA workflow runner and clean Jenkins jobs [8.0] (#3276)
• update CHANGELOG.md

Identity

No changes

8.2.12

Zeebe

Bug Fixes

Broker

• RandomizedRaftTest.consistencyTestWithSnapshot fails with unexpected exception (#13093)
• Avoid parsing DMN decisions for every evaluation (#8571) - significantly reduces latency of DMN tasks
• Upgrading leaves deadline entries without jobs (#13881)

Misc

• Process instances are banned when trying to activate a call activity with large variables (#13521)

Maintenance

• Add ColumnFamily to keep track of executed migrations (#13763)
• Reevaluate Banning concept (#5121)

Merged Pull Requests

• feat(ci): auto merge renovate PRs (#13842)
• Cache parsed DRGs (#13831)
• Build starter/worker using mvn install instead of package (#13828)
• Raise incident on element instance commands exceeding max message size (#13789)
• Track executed migrations in a ColumnFamily (#13780)
• fix(stream-platform): register record listener before start reading (#13778)
• Fix race condition when replicating the first entry of a compacted log and taking a snapshot simultaneously (#13724)

Operate

🧹 Chore

• project: update Zeebe and Identity to 8.2.12 (#5146)
• update CHANGELOG.md

Tasklist

🧹 Chore

• bump zeebe to 8.2.12 (#3329)
• cleanup Jenkins jobs [8.2] (#3279)
• update CHANGELOG.md

Identity

💊 Bugfixes

• upgrade c3 and other dependencies (#1983)
• prevent userdetailsservice auto configuration (#1941) (#1982)
• runs as non-root user by default [Backport v8.2] (#1981)

8.3.0-alpha4

Zeebe

Breaking Changes ❗

Docker - user

With the Zeebe 8.3.0-alpha4 release the default user the zeebe docker image runs with changed from root to 1000/zeebe. This was done in order to better comply with the OWASP recommendations on Docker Security

If you experience permission errors on your data or log volumes, you may need to make sure mounted volumes are writable by this user e.g. via setting fsGroup on k8s to 1000.

Docker - zbctl not included in the Docker image anymore

To reduce the amount of false-positive CVEs on scans of the zeebe docker image we decided to remove zbctl from it. We recommend you to install it locally.

Resources no longer available in the Deployment:CREATED event

Resources in the Deployment:CREATED event are no longer available. Custom Exporters using the resources from this event must be modified to get them from the Process:CREATED event for BPMN models and the DecisionRequirements:CREATED event for DMN models.

Change in monitoring endpoints

There were some changes to the monitoring endpoints of Zeebe, both for the gateway and the broker. All of these were existing redirects to the new endpoints, so their format is left unchanged; only the redirects have been removed.

You may have to change your Kubernetes health probes or metrics scraping endpoints to accomodate the new ones. Note that if you're deploying with the Helm charts, or are using Camunda Platform 8 SaaS, you do not need to do anything.

Broker

• The /metrics endpoint is now /actuator/prometheus

Gateway

• The /metrics endpoint is now /actuator/prometheus
• The /health endpoint is now /actuator/health
• The /startup endpoint is now /actuator/health/startup
• The /live endpoint is now /actuator/health/liveness

Enhancements

Java Client

• Stream jobs using job worker (#13473)
• newModifyProcessInstanceCommand: complete command with single variable (#13460)
• newThrowErrorCommand: complete command with single variable (#13458)
• newFailCommand: complete command with single variable (#13456)
• newBroadcastingSignalCommand: complete command with single variable (#13451)
• newEvaluateDecisionCommand: complete command with single variable (#13449)
• newPublishMessageCommand: complete command with single variable (#13447)
• newCreateInstanceCommand: complete command with single variable (#13443)
• Allow custom job worker executors (#13428)

Broker

• Scheduled tasks should not block processing (#12302)

zbctl

• Remove zbctl from 8.3 images going forward (#13024)

Misc

• Validate user input before registering a worker to the job stream (#13465)
• Implement ZeebeClient wrapper for the StreamJobs RPC (#13429)
• Add and handle Process Deleting event (#13349)
• Add a state to PersistedProcess (#13348)
• Remove from PROCESS_INSTANCE_KEYS_BY_DEFINITION_KEY ColumnFamily (#13342)
• Insert into the PROCESS_INSTANCE_KEYS_BY_DEFINITION_KEY ColumnFamily (#13341)
• Add PROCESS_INSTANCE_KEYS_BY_DEFINITION_KEY ColumnFamily (#13340)
• Add Resource Deleting intent (#13335)
• As a Zeebe Java user, I want to complete a Job with a single variable (#13040)
• Export number of buffered messages as metrics (#12975)
• Add message definition extension elements (#12878)
• Forcefully terminate a process instance (#12696)
• Docker: Run the zeebe process with an unprivileged user by default (#12382)
• Add gRPC job stream API (#11708)

Bug Fixes

Broker

• Regression in deploying large payloads (#13233)

Misc

• Release Dry fails because of unrecognized argument (#13715)
• ZeebePartitionHealth repeatedly reports change of health status (#13650)
• PartitionListeners are notified even if the transition is cancelled causing NPE (#13471)
• Gateway readiness fails when tls enabled (#13431)
• Cancel on-going remote stream registration on stream removal (#13061)
• Error message truncation may be too strict (#13046)
• Don't mutate state through JobBackoffChecker (#13041)
• Zeebe should only log as JSON, if configured to do so (#12886)
• ExceededBatchRecordSizeException: Can't append entry (#12007)

Maintenance

• Automatically merge backport PRs (#13666)
• Snyk monitoring wrong Docker images for stable releases (#13645)
• Mark PR as stale after 1 month (#13601)
• Define actor names for new remote stream actors (#13281)
• Use a fixed length segment descriptor (#13240)
• Align with Docker base image best practices (#13214)
• Reduce container CVE maintenance effort (#12959)
• Update Elasticsearch client to 8.7 (#12859)
• Make dashboard UIDs human-readable (#12601)
• Switch custom AwsSignHttpRequestInterceptor in Opensearch exporter to library (#12427)
• Register ClientStreamConsumer adapters for every gRPC stream observer (#12390)
• Implement ClientStreamConsumer adapter to forward jobs to gRPC clients (#12389)
• Investigate usage of client in gateway (#11799)
• Integrate end-to-end job stream lifecycle management (#11710)
• ARM64 CI Jobs frequently fail due to connection resets (#11590)

Merged Pull Requests

• Remove process instance keys from PROCESS_INSTANCE_KEY_BY_DEFINITION_KEY ColumnFamily (#13376)

Operate

🚀 New Features

• backend: Update schema to support DELETE_DECISION_DEFINITION (#5035)
• backend: resource based permissions for SaaS (#4965)
• try active tab polling (#4940)
• backend: change treePath data type and queries for flow node instances (#4993)
• backend: Endpoint to search decision instances (#4893)
• backend: default tenantId during migration (#4877)
• backend: Endpoint to get decision requirements xml (#4868)
• backend: add tenantId fields to indices... (#4869)
• backend: replace ES BulkRequest with interface BatchRequest (#4702)
• backend: Endpoint to search and filter decision requirements (#4826)
• backend: Endpoint to get decision instance by id (#4849)

💊 Bugfixes

• docker: run as non-root by default (#5020)
• use carbon link for external href links (#5028)
• security: Replace default-src csp header with more specific ones (#5033)
• backend: Operate importer and archiver are not initialized (#5000)
• backend: ClassCastException in post importer (#5008)
• deps: update dependency mobx ...

8.2.11

Zeebe

Enhancements

Misc

• Forcefully terminate a process instance (#12696)

Bug Fixes

Misc

• Release Dry fails because of unrecognized argument (#13715)
• Gateway readiness fails when tls enabled (#13431)
• ExceededBatchRecordSizeException: Can't append entry (#12007)

Maintenance

• Snyk monitoring wrong Docker images for stable releases (#13645)
• Investigate usage of client in gateway (#11799)
• ARM64 CI Jobs frequently fail due to connection resets (#11590)

Merged Pull Requests

• fix(ci): configure fake gcs server port (#13738)
• fix(release): read releaseBranch from output on reusable workflow call (#13737)
• Optimize Dockerfile for CVE maintenance (#13706)
• Ban instance fix error message (#13705)
• test(stream-platform): clear mock invocations to prevent memory leak (#13698)
• refactor(gateway): remove responsiveness indicator (#13685)
• Fix backport automerge (#13680)
• Tag original PR author in backport PR (#13675)
• Auto merge backport PRs (#13667)
• test(engine): add TestWatcher to ProcessEngineMetricsTest (#13659)
• fix(.github): monitor correct image on release (#13646)
• Prevent exceeding max message size on job batch activate commands (#13624)
• fix(broker): ensure that failure in transition to INACTIVE isn't ignored (#13608)
• ci(smoke): use aws arm64 runner (#13530)
• ci(go): fix go lint cache issue (#13308)

Operate

🚀 New Features

• backend: change treePath data type and queries for flow node instances (#4998)
• poll only in active tab (#4940) (#5014)

💊 Bugfixes

• security: Replace default-src csp header with more specific ones (#5033) (#5050)

🧹 Chore

• update Zeebe and Identity to 8.2.11 (#5064)
• update CHANGELOG.md

Tasklist

🧹 Chore

• bump zeebe to 8.2.11
• update CHANGELOG.md

Identity

No changes

8.1.15

Zeebe

Bug Fixes

Misc

• Release Dry fails because of unrecognized argument (#13715)
• ZeebePartitionHealth repeatedly reports change of health status (#13650)
• Gateway readiness fails when tls enabled (#13431)
• Jobs not timing out in v8.1.12 (#13190)
• Error message truncation may be too strict (#13046)
• ExceededBatchRecordSizeException: Can't append entry (#12007)
• Truncate errorMessage to prevent exceeding maxMessageSize (#11460)

Maintenance

• Snyk monitoring wrong Docker images for stable releases (#13645)
• Investigate usage of client in gateway (#11799)

Merged Pull Requests

• fix(release): read releaseBranch from output on reusable workflow call (#13737)
• Fix backport automerge (#13680)
• Tag original PR author in backport PR (#13675)
• Auto merge backport PRs (#13667)
• test(engine): add TestWatcher to ProcessEngineMetricsTest (#13659)
• fix(broker): report health on change only (#13655)
• fix(.github): monitor correct image on release (#13646)
• ci(release): use new stable release runner pool (#13628)
• Prevent exceeding max message size on job batch activate commands (#13624)
• fix(release): increased maven & Go release timeout (#13623)
• fix(broker): ensure that failure in transition to INACTIVE isn't ignored (#13608)
• Resolve flaky EmbeddedSubProcessConcurrencyTest (#13498)
• Reset reschedule flag correctly on JobTimeoutTrigger (#13441)
• Increase error message truncation limit (#13414)
• refactor: do not upload sarif on release dry run (#13411)
• Temporarily disable TCC for integration tests (#13404)
• ci(go): fix go lint cache issue (#13308)
• Log node member ID via the scheduler name as part of actor logging context (#13298)
• fix: change shouldNotPreallocateSegmentFiles() test when running on M… (#12816)
• Limit error message size in job and incident records (#12066)

Operate

🚀 New Features

• backend: change treePath data type and queries for flow node instances (#5003)
• poll only in active tab (#4940) (#5015)

💊 Bugfixes

• disable inline scripts (#5060)
• backend: Operate importer and archiver are not initialized (#5044)
• security: Replace default-src csp header with more specific ones (#5033) (#5052)
• chore: change base image
• backend: Field parentKey missing in proces instance endpoint (#4931)
• backend: Fix vulnerabilities reported by Snyk (#4922)

🧹 Chore

• update Zeebe and Identity to 8.1.15 (#5065)
• pom: update Spring Boot to fix CVE-2023-34034 (#4968)
• update CHANGELOG.md

Tasklist

💊 Bugfixes

• billing tab (#3235)

🧹 Chore

• bump zeebe to 8.1.15
• runs-on build
• migrate main Jenkins build pipeline to GHA for stable/8.1 (#3104)
• update CHANGELOG.md

Identity

💊 Bugfixes

• management-api/pom.xml to reduce vulnerabilities (#1955)

8.0.19

Zeebe

Bug Fixes

Misc

• Release Dry fails because of unrecognized argument (#13715)
• ZeebePartitionHealth repeatedly reports change of health status (#13650)
• Error message truncation may be too strict (#13046)
• ExceededBatchRecordSizeException: Can't append entry (#12007)
• Truncate errorMessage to prevent exceeding maxMessageSize (#11460)

Maintenance

• Snyk monitoring wrong Docker images for stable releases (#13645)

Merged Pull Requests

• fix(release): read releaseBranch from output on reusable workflow call (#13737)
• Tag original PR author in backport PR (#13675)
• Auto merge backport PRs (#13667)
• test(engine): add TestWatcher to ProcessEngineMetricsTest (#13659)
• fix(broker): report health on change only (#13655)
• fix(.github): monitor correct image on release (#13646)
• ci(release): use new stable release runner pool (#13628)
• Prevent exceeding max message size on job batch activate commands (#13624)
• fix(release): increased maven & Go release timeout (#13623)
• Increase error message truncation limit (#13414)
• refactor: do not upload sarif on release dry run (#13411)
• Temporarily disable TCC for integration tests (#13404)
• ci(go): fix go lint cache issue (#13308)
• [Backport stable/8.0] fix: fix log info arguments #13137 (#13140)
• fix: change shouldNotPreallocateSegmentFiles() test when running on M… (#12816)
• Limit error message size in job and incident records (#12066)
• fix: more precise and reliable way to force new leaders in tests (#10066)

Operate

🚀 New Features

• backend: change treePath data type and queries for flow node instances (#5002)

💊 Bugfixes

• disable inline scripts (#5059)
• security: Replace default-src csp header with more specific ones (#5033) (#5051)
• chore: change base image
• backend: Field parentKey missing in proces instance endpoint (#4932)
• backend: Fix vulnerabilities reported by Snyk (#4927)

🧹 Chore

• update Zeebe and Identity to 8.0.19 (#5066)
• pom: update Spring Boot to fix CVE-2023-34034 (#4969)
• update CHANGELOG.md

Tasklist

🧹 Chore

• bump zeebe to 8.0.19
• cleanup Jenkins jobs
• migrate main Jenkins build pipeline to GHA for (#3106)
• update CHANGELOG.md

Identity

💊 Bugfixes

• management-api/pom.xml to reduce vulnerabilities (#1950)
• sdk-java/pom.xml to reduce vulnerabilities (#1930)

8.2.10

Zeebe

Bug Fixes

Misc

• ZeebePartitionHealth repeatedly reports change of health status (#13650)

Merged Pull Requests

• fix(broker): report health on change only (#13655)
• ci(release): use new stable release runner pool (#13628)
• Improve logs in LocalStack backup tests (#13599)

Operate

💊 Bugfixes

• backend: ClassCastException in post importer (#5008) (#5009)

🧹 Chore

• pom: update Zeebe and Identity till 8.2.10 (#5011)
• update CHANGELOG.md

Tasklist

🧹 Chore

• release operator 8.2.10
• update CHANGELOG.md

Identity

💊 Bugfixes

• management-api/pom.xml to reduce vulnerabilities (#1957)

8.2.9

Zeebe

Enhancements

Misc

• Detect health issue when partition is stuck in a transition (#13042)

Bug Fixes

Misc

• Jobs not timing out in v8.1.12 (#13190)
• Error message truncation may be too strict (#13046)

Maintenance

• Use Snyk to check for license issues or dependency vulnerabilities (#9245)

Merged Pull Requests

• fix(release): increased maven & Go release timeout (#13623)
• deps(maven): bump version.spring-boot from 3.1.1 to 3.1.2 (#13569)
• refactor(broker): log write failure for more context (#13518)
• Resolve flaky EngineErrorHandlingTest.shouldNotBanInstanceOnJobCommand (#13502)
• Resolve flaky EmbeddedSubProcessConcurrencyTest (#13498)
• Mark skipped commands as processed (#13446)
• Reset reschedule flag correctly on JobTimeoutTrigger (#13441)
• Increase error message truncation limit (#13414)
• refactor: do not upload sarif on release dry run (#13411)
• Temporarily disable TCC for integration tests (#13404)
• Switch to software.xdev.saveactions IDEA plugin (#13326)
• Delete flaky test CancelProcessInstanceBanTest (#13310)
• Log node member ID via the scheduler name as part of actor logging context (#13298)
• refactor: stabilize container based tests (#13278)
• Monitor Snyk projects on release (#13069)
• fix: change shouldNotPreallocateSegmentFiles() test when running on M… (#12816)

Operate

💊 Bugfixes

• backend: fix the exception in post importer (#4879) (#4880)

🧹 Chore

• update base digest amd64 (#4989)
• pom: update Zeebe and Identity till 8.2.9 (#4987)
• pom: update Spring Boot to fix CVE-2023-34034 (#4967)
• deps: bump version.spring.boot from 3.0.7 to 3.1.1 (#4788) (#4852)
• update CHANGELOG.md

Tasklist

💊 Bugfixes

• fixing billing tab (#3235)

🧹 Chore

• bumping zeebe and identity for 8.2.9 release
• runs-on build
• migrate main Jenkins build pipeline to GHA for stable/8.2 (#3102)
• update CHANGELOG.md

Identity

No changes

8.3.0-alpha3

Zeebe

Release 8.3.0-alpha3

Enhancements

Misc

• Automatically add support label to support related issues (#12655)

Bug Fixes

Misc

• When the deployment of a process definition failed, clients can still start new process instances of the actually non-existing process definition (#13254)
• Segfault on enabling async scheduled task (#13164)
• NPE when processing Job.TIME_OUT command (#13123)
• Handle stream consumers changes during push (#13038)
• Endless client job stream registration (#13036)
• Straight-through processing loop may cause problems (#12957)
• Failing jobs with job push enabled breaks the job lifecycle (#12933)
• Allow extending journal record format with out breaking compatibility (#12915)
• ModifyProcessInstanceRejectionTest#shouldRejectActivationWhenAncestorScopeIsNotFlowScope test fails on Windows (#12875)
• Catch all error events by using empty 'errorCode' does not work (#12837)
• Cannot resolve output mapping incident on a none end event (#12833)

Maintenance

• Remove Spring warning about spring-jcl and commons-logging (#13299)
• Append latest version of records by default (#13161)
• Implement compact record logger for Command Distribution (#13057)
• Compare SST partitioning with real Column Family split (#12955)
• StateUtil.verifySnapshotLogConsistent message does not indicate which partition is affected (#12818)
• Don't share mutable state through MutablePendingMessageSubscriptionState (#12798)
• Version event appliers (#12764)
• Reduce startup time when there are many segments (#12667)
• Automatically add support label to support related issues (#12655)
• Improve QA of stable branches (#12418)
• Create a CommandRedistributor (#11914)
• Switch Deployment:Create processor to new record distribution behavior (#11661)
• Use Snyk to check for license issues or dependency vulnerabilities (#9245)
• Replace usages of JSR305 from FindBugs with SpotBugs annotations (#8846)

Documentation

• Document new Deployment Distribution logic (#13058)

Merged Pull Requests

• deps(maven): bump rest-assured from 5.3.0 to 5.3.1 (#13168)
• Monitor Snyk projects on release (#13069)

Operate

🚀 New Features

• backend: Endpoint to get decision requirements by key (#4794)
• backend: Introduce NumberThrottable for adapting batch size (#4551)
• backend: Endpoint to search and filter decision definitions (#4708)
• update bpmn-js / @bpmn-io/element-template-icon-renderer (#4621)
• backend-test: Add test for catch all error event (#4706)
• backend: Endpoint to get decision definition by key (#4677)
• backend: Remove usage of ELS classes (#4647)

💊 Bugfixes

• backend: close ElasticsearchClient properly (#4840)
• deps: update dependency mixpanel-browser to v2.47.0 (#4286)
• migration-test: add store package for scanning (#4793)
• backend: post importer must be ready for deleted process instances (#4755)
• deps: update dependency dmn-js to v14 (#4775)
• backend: Field parentKey missing in proces instance endpoint (#4710)
• deps: update dependency @carbon/elements to v11.24.0 (#4760)
• deps: update dependency bpmn-js to v13.2.0 (#4762)
• deps: update dependency date-fns to v2.30.0 (#4763)
• deps: update all non-major dependencies (#3962)
• backend: fix NPEs (#4719)

🧹 Chore

• update Zeebe and Identity to 8.3.0-alpha3 (#4847)
• fix dmn arrow color
• convert processes notifications to carbon (#4828)
• deps: bump frontend-maven-plugin from 1.12.1 to 1.13.4 (#4812)
• fix broken styles after carbon update (#4827)
• deps: update eclipse-temurin:17.0.7_7-jre-focal docker digest (#4831)
• convert decisions notifications to carbon (#4824)
• copy and adjust tests (#4823)
• add result panel (#4822)
• add skeleton (#4821)
• add input output panel (#4820)
• use tabview for bottom panel (#4809)
• implement infinite scrolling (#4790)
• docker-compose: allow deletion with wildcard for dev ELS
• convert decision instance detail header to carbon (#4803)
• deps: bump maven-shade-plugin from 3.4.1 to 3.5.0 (#4796)
• deps: bump version.spring.boot from 3.0.7 to 3.1.1 (#4788)
• deps: bump snakeyaml from 1.33 to 2.0 (#4185)
• deps: bump maven-failsafe-plugin from 3.1.0 to 3.1.2 (#4797)
• deps: bump version.micrometer from 1.11.0 to 1.11.1 (#4795)
• fix tooltip displayed for operation for large variable names (#4791)
• deps: bump version.jackson from 2.15.0 to 2.15.2 (#4633)
• update image base name
• deps: bump auth0 from 1.44.2 to 2.2.0 (#4468)
• deps: bump maven-source-plugin from 3.2.1 to 3.3.0 (#4601)
• deps: bump maven-release-plugin from 3.0.0 to 3.0.1 (#4656)
• copy and adjust tests (#4785)
• fix variable panel tests (#4773)
• add visual regression tests (#4553)
• add skeleton (#4759)
• add view full variable buttons (#4756)
• convert variable footer to carbon (#4752)
• update carbon and composite component dependencies (#4774)
• deps: update dependency lint-staged to v13.2.3 (#4757)
• deps: update dependency @testing-library/dom to v9.3.1 (#4749)
• deps: update dependency testcafe to v2.6.2 (#4750)
• deps: update dependency typescript to v5.1.5 (#4751)
• convert new variable modifications to carbon (#4743)
• deps: update dependency monaco-editor to v0.39.0 (#4731)
• deps: update hashicorp/vault-action digest to 357cb9c (#4728)
• deps: update node.js to v18 (#4732)
• add edit variable field (#4742)
• fix styling for existing variables (#4733)
• add operation buttons for existing variables ([#4727](https://github.com...